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Web Site Identity Assurance 
Computer Desktop ^^^^ 



Web Browser 



Confirmed 
Site Owner 
Name 



Confirmed 
Site Owner Name 

2. Example of confirmed 
identity displayed using client 
side application outside the 
web browser environment 
(See Figure 4, 5, and 7) 




1 . Example of displaying 
confirmed identity using 
dynamic icon on website 
(See figure 6) 



FIG. 3 
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Web Site Identity Assurance 

Client Application Example- Assuring 3rd Party Server 
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1 . At set up time the Web 
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Client side application running 
on end user's machine able to see 
what web browser is doing. 



FIG. 4 
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Web Site Identity Assurance 

Client Application Example - Assurance File on Web Site Server 
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Server 



1 . At set up 
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Party provides Web Site with 
digitally signed file containing 
URL of SSL 
Certificate 
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3. 
Client 
Application goes to 
3rd party server and 
performs lookup based 
on domain of Web site 
server and retrieves 
URL of challenge- 
response file 



Cli ent Computer 



Web Browser 



Confirmed 
Site Identity 




Client side application running on 
end user's machine able to see 
what web browser is doing. 



Assuring 3rd 
Party Server 



4. If Web Site is 
registered with 
Assuring 3rd Party 

then URL to 
challenge-response 
file is returned. 



6. Client application* 
decodes encrypted 
file to validate and 
prove this is site it, 
claims to be. 



FIG. 5 
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Web Site Identity Assurance 
Dynamic Icon Example 




Web Site 
Server 



1. 

Web Site 
Owner registers 
with Assuring 3rd^ 
Party. ^ 



5. Assuring 
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domain in database to 
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create the dynamic icon 
image 
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server) 
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HTML 
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7. If user 
"clicks" on dynamic 
icon, it causes another 
call to 3rd party server 
to retrieve page of 
identity 
information 



Dynamic Icon placed on website. 
Dynamically renders confirmed 
identity. 



8. 

Returned from 
3rd party server is a 
formatted page of 
identity information 
from repository 
lookup 



FIG. 6 
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Web Site Identity Assurance 
SSL Only example 




Assuring 3rd 
Party Server 



Client Computer 



Web Browser 
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2. Client Application 
validates SSL certificate and 
displays Organization Name as 
Confirmed Identity using 
authentication information 
embedded in standard SSL 
digital certificate 





Client side application running on 
end user's machine able to see 
what web browser is doing. 



FIG. 7 
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